This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/434824d9-2fdf-3385-94a7-b5c7bae2fba1.roa
File: 434824d9-2fdf-3385-94a7-b5c7bae2fba1.roa (raw, json)
Hash identifier: qU7sIWk6AN6AX9/BES2+ti3GdWdZ/hLJbLDaysbmizY=
Subject key identifier: A7:CB:10:50:30:49:24:EF:5D:10:DD:41:DF:BF:1F:11:28:5E:09:24
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584BFFDBF33F81751B5BD600CA00
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/434824d9-2fdf-3385-94a7-b5c7bae2fba1.roa
Signing time: Thu 27 Nov 2025 14:00:40 +0000
ROA not before: Thu 27 Nov 2025 14:00:40 +0000
ROA not after: Wed 25 Feb 2026 14:00:40 +0000
asID: 22773
IP address blocks: 72.210.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Dec 2025 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:ff:db:f3:3f:81:75:1b:5b:d6:00:ca:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Nov 27 14:00:40 2025 GMT
Not After : Feb 25 14:00:40 2026 GMT
Subject: CN=baca1f7f-9817-465e-9c7c-ab50c14ab047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:97:66:cf:2a:d5:ec:30:b5:bb:3c:f3:85:e8:
d9:9e:9a:56:09:e0:fb:c5:7e:12:aa:6d:93:bc:0e:
04:34:5f:63:b8:e9:d6:6d:2f:df:2a:64:78:1d:03:
ca:87:be:85:f6:6d:ec:b1:3e:51:0e:d0:6d:51:13:
a6:dc:e1:41:4d:10:64:ef:ec:72:21:c3:54:5d:e0:
fc:20:27:4c:92:a1:2f:42:f9:00:44:db:1b:7e:6c:
fc:19:cd:c2:77:6e:eb:98:1c:e4:b6:b6:b4:14:77:
d0:d7:c2:d3:8b:7b:11:42:c4:fb:85:1f:d6:ae:72:
c3:f0:21:4d:07:ec:49:d6:28:37:9c:4c:cd:64:ab:
5f:35:e7:6c:48:86:aa:40:91:3e:fb:be:5e:fc:6f:
e9:cc:a3:e7:78:f3:e5:6c:56:0c:c6:05:70:bb:4f:
23:0a:05:5c:c8:22:9c:ce:17:8a:29:ed:eb:a6:72:
65:7f:a2:3c:63:8f:d2:ed:3d:59:75:81:ea:88:9f:
f6:43:fe:b1:be:21:9b:d2:ba:9c:06:79:4d:ee:0b:
c1:71:c7:ef:43:32:31:20:db:c0:2a:46:76:5f:11:
66:90:0f:5e:6f:ca:f6:6c:7d:1f:0a:24:b5:2f:0b:
e7:ce:99:b0:da:59:82:73:d2:de:06:35:71:bd:8f:
ce:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:CB:10:50:30:49:24:EF:5D:10:DD:41:DF:BF:1F:11:28:5E:09:24
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/434824d9-2fdf-3385-94a7-b5c7bae2fba1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
72.210.33.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:b6:41:c4:52:e6:ad:d5:20:20:48:5d:90:cf:60:d7:3f:5f:
ba:0c:4e:a4:ac:4c:47:3a:9d:a7:48:0a:46:10:5b:2c:dc:af:
c6:8e:89:1f:6b:e2:e8:ad:0f:0c:9e:fa:f2:0e:81:93:ee:8b:
11:03:15:72:b3:cc:d3:93:80:e1:b8:3f:4a:89:35:ef:68:dd:
45:3c:22:93:91:87:93:d9:0d:e3:54:51:c1:ae:41:09:81:5e:
71:b8:57:4a:a8:75:8c:be:e7:a2:68:51:fb:d5:68:54:90:b9:
30:4c:57:65:d3:a4:72:dd:73:d1:a4:83:18:4f:cf:67:91:d0:
0f:f5:e1:33:f8:1f:b5:eb:6c:d8:3e:01:f5:45:09:60:88:60:
83:df:48:2d:1f:9a:ca:15:5b:22:0e:f8:d8:ae:87:80:d5:0a:
a4:e6:b7:0d:8e:56:a7:9b:84:f2:00:8c:08:cb:1f:1d:6a:15:
a6:64:ca:4c:61:0a:c3:ec:a8:2d:0b:0e:c0:c0:55:99:86:75:
67:54:15:7d:21:ab:34:a4:d9:6c:88:e8:88:b7:60:9d:ed:15:
87:d3:53:15:17:c4:c0:d1:02:85:a5:f0:fc:fb:f5:93:8b:34:
a9:24:28:47:11:d5:74:a9:f5:ce:70:e0:85:62:c4:57:a2:18:
48:9d:04:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 20:18:29 2025 by rpki-client